Google Employee Charged with Insider Trading Using Confidential AI Info

Key Takeaways

• A Google software engineer has been charged with insider trading using confidential company information related to Google’s internal developments.
• The individual allegedly exploited non-public data to generate over $1.2 million in profits from trades on a blockchain-based prediction market.
• The case highlights significant insider threat concerns and the evolving methods of financial exploitation through non-traditional trading platforms.

Google Engineer Accused of Insider Trading with Confidential AI Data

U.S. authorities have filed charges against a Google software engineer, alleging he exploited proprietary internal company information to secure illicit profits exceeding $1.2 million through prediction market trading. This incident brings into sharp focus the persistent challenge of insider threats and the potential for misuse of privileged access within major technology firms.

The U.S. Attorney’s Office for the Southern District of New York identified the accused as Michele Spagnuolo, known online by the alias “AlphaRaccoon.” Spagnuolo is alleged to have leveraged sensitive, non-public business intelligence acquired during his employment at Google to gain an unfair advantage in financial markets.

Investigators contend that Spagnuolo accessed internal Google systems containing data explicitly marked “Google Confidential.” While his role as an engineer granted him legitimate access to these platforms, prosecutors assert he misused this privilege to inform his trading activities.

Exploiting Confidential Information for Financial Gain

These internal systems reportedly offered Spagnuolo insights into upcoming company initiatives and market trends that had not yet been disclosed to the public. Despite having affirmed Google’s stringent confidentiality and ethics guidelines, he allegedly utilized this confidential information to guide his trading decisions on Polymarket, a decentralized prediction market platform.

According to the official complaint, Spagnuolo established the “AlphaRaccoon” account in May 2024. Subsequently, between October 15 and December 4, 2025, he purportedly risked approximately $2.75 million across various prediction markets. These trades were reportedly based on anticipated outcomes derived directly from his access to Google’s internal data.

Authorities claim that after the pertinent information became public and the prediction markets settled, Spagnuolo realized profits totaling around $1.2 million. Prosecutors argue these earnings were a direct consequence of his insider knowledge, thereby violating federal financial and fraud statutes.

Legal Ramifications and Broader Implications

Spagnuolo, a 36-year-old Italian national residing in Switzerland, faces serious charges, including commodities fraud, wire fraud, and money laundering. A conviction could lead to substantial prison sentences, with the most severe charges carrying a maximum penalty of 20 years.

From a cybersecurity and insider risk management perspective, this case serves as a stark reminder of the dangers posed by excessive access to sensitive data within corporate environments. Even organizations with robust security policies can be vulnerable if monitoring and behavioral analytics fail to detect malicious activity from trusted insiders with legitimate system access.

The incident also highlights the evolving landscape of financial exploitation, where non-traditional platforms like prediction markets are increasingly being used to monetize insider information. These decentralized platforms may introduce novel challenges for regulatory oversight and detection compared to traditional financial markets. Law enforcement agencies, including the FBI and the U.S. Department of Justice, have affirmed their commitment to identifying and prosecuting individuals who exploit corporate access for personal enrichment.

The Securities and Commodities Fraud Task Force is handling the case, emphasizing that the allegations are currently under judicial review. For corporations, this incident underscores the critical need to fortify insider risk management programs, enforce stringent access controls, and deploy advanced monitoring systems to identify anomalous data usage patterns before they result in significant financial or reputational damage.

What You Should Do

• Implement robust insider threat programs that combine technical controls with human behavioral analysis.
• Enforce the principle of least privilege for all employees, ensuring access to sensitive data is strictly limited to what is necessary for their job functions.
• Deploy advanced data loss prevention (DLP) and user behavior analytics (UBA) tools to monitor for unusual data access, downloads, or transfers.
• Conduct regular audits of employee access rights and system logs to detect unauthorized or anomalous activity.
• Provide continuous training on ethics, confidentiality policies, and the severe consequences of insider trading and data misuse.

Disclaimer: HackersRadar reports on cybersecurity threats and incidents for informational and awareness purposes only. We do not engage in hacking activities, data exfiltration, or the hosting or distribution of stolen or leaked information. All content is based on publicly available sources.